Skip to main content

Legal

Responsible Disclosure Policy

Report security vulnerabilities responsibly.

Effective date: July 2026. Issued by WSU BrandShop, a retail channel of Walter Sisulu University.

1. Purpose

We welcome responsible reporting of security vulnerabilities in BrandShop systems.

2. How to report

Email brandshop@wsu.ac.za with subject Security disclosure. Include steps to reproduce, impact assessment and your contact details.

3. Safe harbour

Good-faith research without data exfiltration, service disruption or privacy violation will not attract legal action.

4. Response

Acknowledgement within 5 business days; remediation timelines communicated confidentially.